Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6425852b-d965-38b2-99b9-6a2d2330bb9b.roa
File:                     6425852b-d965-38b2-99b9-6a2d2330bb9b.roa (raw, json)
Hash identifier:          Bd1eCI9OkyX5ao4nj74ul6DOUAcErEdfAfTBM/t8hWk=
Subject key identifier:   FC:E4:96:4F:A9:49:97:B9:4C:8A:58:E2:11:E9:51:4D:2D:BD:CC:AE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DA815924A3C61D7CFC5054300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6425852b-d965-38b2-99b9-6a2d2330bb9b.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     6167
IP address blocks:        2600:1009:a027::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:92:4a:3c:61:d7:cf:c5:05:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=f3127d12-a355-4e3b-b121-ffaee347e123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:18:2e:33:06:94:30:6b:a8:61:e6:2f:8e:c8:
                    e7:6e:0a:b7:05:d9:09:c1:7b:3a:e2:92:9d:96:a0:
                    f9:29:b7:e4:c5:34:53:c4:a0:c8:73:48:15:92:90:
                    fd:c6:91:ed:8d:b1:a5:56:33:18:53:2e:98:39:4b:
                    06:a6:bc:31:00:ce:5a:07:43:ac:2f:7c:9d:3d:84:
                    71:29:e4:28:73:d4:3a:b8:3a:d7:54:74:dc:45:01:
                    a4:17:95:fe:f4:8f:3e:a7:b0:45:73:47:5c:fb:8a:
                    15:22:e9:3a:e5:03:12:57:ef:09:d4:6a:c3:8e:8e:
                    6e:7d:aa:b2:4e:db:3d:da:01:e9:ba:b3:47:c0:d6:
                    3b:fd:10:9b:eb:c3:cc:22:3a:3a:49:20:1d:a8:23:
                    ea:87:b8:5f:b2:52:50:f9:a6:c0:97:df:ee:39:b0:
                    ed:4f:71:7b:e2:11:27:19:fc:b0:76:54:64:79:d2:
                    eb:88:61:ca:76:82:1a:b6:83:80:18:a1:99:0d:49:
                    6e:68:f1:4f:f6:9c:4c:ee:f9:ef:32:40:32:7b:60:
                    3f:ac:3b:51:ed:f1:90:61:97:89:2b:9f:e7:4b:57:
                    8d:64:29:64:26:98:2a:5b:44:5e:74:8e:a2:10:cd:
                    11:62:55:a5:fe:f9:d2:93:62:80:37:0d:41:4b:07:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E4:96:4F:A9:49:97:B9:4C:8A:58:E2:11:E9:51:4D:2D:BD:CC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6425852b-d965-38b2-99b9-6a2d2330bb9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1009:a027::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:10:ce:c1:17:d7:c9:4f:49:13:ab:8d:14:95:f8:68:fd:
         82:87:35:b1:86:a5:ef:ae:42:57:b4:ff:aa:e3:6e:35:92:12:
         87:35:21:f2:20:cf:2b:72:0c:ad:d8:62:23:b3:3e:b3:13:6f:
         54:f0:1a:9d:d0:33:dd:d7:4a:e1:7f:08:aa:67:4e:fc:cf:b2:
         bf:4f:7d:9c:38:19:a5:c1:1d:08:c6:15:88:c5:83:81:0e:12:
         e8:9f:98:24:0f:f6:82:ce:6a:1e:d0:d8:42:e4:99:60:aa:75:
         19:d5:c2:d3:d4:48:08:dd:69:04:8b:9f:b7:9b:bd:33:54:03:
         ba:b9:4f:48:6a:f9:51:5a:2a:fd:b1:77:65:dd:99:76:69:69:
         a8:11:41:67:13:11:34:f5:54:93:d9:27:b1:0c:c7:06:6d:d1:
         60:d7:61:2e:0d:0c:81:15:1c:b0:7d:07:a2:75:99:35:e3:cd:
         f9:db:c6:5f:80:74:70:a3:4e:98:a5:b5:f3:b2:ab:6b:6b:78:
         bc:db:01:3c:cd:bd:45:5d:66:5a:7c:47:9d:00:fc:50:bb:0c:
         19:95:d1:f3:5f:8f:9b:a5:dc:23:df:6c:34:71:e6:e0:8d:a7:
         b0:cd:83:f4:e7:1f:b2:4f:bf:f6:cc:32:ca:d7:3e:ea:74:98:
         7e:f0:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:27:53 2026 by rpki-client